Application No. 09/853,743 Docket No.: 08204/0203 160-USO 

Amendment dated January 27, 2006 
Reply to Office Action of July 29, 2004 

REMARKS 

Claims 1-30 are pending in this Application. A Non-Final Office Action dated July 
29, 2004, rejected Claims 1-30. A response to this Office Action was not timely filed, and a Notice 
of Abandonment was mailed on March 14, 2005. Claims 1, 8, 9, 10, 14, 16, 19, 23, and 24 are 
amended in the present response. Also, with the entry of the present response. Claims 1-24 remain 
pending and Claims 25-30 are canceled. 

A Petition to Revive the instant application is being filed concurrently herewith this 
Amendment along with a declaration that the entire period of delay in responding to the last Office 
Action was unintentional. 

No new matter is added by way of this amendment. For at least the reasons discussed in 
detail below, each of the presently pending claims is in condition for allowance. 

Claim Rejections - 35 U.S.C. § 112 

The Office Action has rejected Claims 4, 8, 19, and 23 under 35 U.S.C. § 1 12, second 
paragraph, as being indefinite for failing to particularly point out and distinctly claim the subject 
matter which Applicant regards as the invention. The examiner objected to the Applicant's use of 
the trademark "JAVA" to further limit claims. 

As amended, Claims 4, 8, 19, and 23 no longer use the word "JAVA" , instead the 
phrase "locally executed" is now claimed. Thus, the rejection is now moot under 35 U.S.C. §112, 
second paragraph rejections for Claims 4, 8, 19, and 23. 

Rejections Under 35 U.S.C. S 102(e) 

The Office Action has rejected Claims 1-3, 5-7, 9-18, 20-22, 24-27, 29, and 30 under 35 
U.S.C. § 102(e) as being anticipated by Bowman et al. (U.S. Patent No. 6,751,736, hereinafter 
"Bowman"). 
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14. (Currently amended) The method of Claim 12 wherein [[the]] an encryption key is 
based on login data received from a user. 

15. (Original) The method of Claim 10 further comprising: 
generating a login window within the frame; 

receiving login data from a user; and 
receiving the login data in the security applet. 

16. (Currently amended) A computer readable storage media containing executable 
computer program instructions which when executed cause a digital processing system to perform a 
method comprising: 

concatenating data from a plurality of fields of a requested web page into a string; 
encrypting the string; 

serving to a user node, [[a]] the web page and including a form corresponding to the 
requested web page that includes each blank field in w4#i the plurality of blanlc fields and the 
encrypted string ; and 

enabling at least the encrypted string to be locally decrypted at the user node. 

17. (Original) The computer readable storage media of Claim 16 which when executed 
cause a digital processing system to perform a method further comprising: 

appending a digital signature to the string prior to encryption. 

1 8. (Original) The computer readable storage media of Claim 16 which when executed 
cause a digital processing system to perform a method further comprising: 

inserting the string and a script into a defined portion of the web page to be served. 

19. (Currently amended) The computer readable storage media of Claim 18 which when 
executed cause a digital processing system to perform a method further comprising: 

the defined portion is a locally executed Java script section of the web page. 
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20. (Original) The computer readable storage media of Claim 16 which when executed 
cause a digital processing system to perform a method further comprising: 

serving a script within the web page, the script to decrypt the string and apportion the string 
to the blank fields. 

21 . (Original) The computer readable storage media of Claim 16 which when executed 
cause a digital processing system to perform a method further comprising: 

serving a security applet to the user node; and 

receiving login data from the user node encrypted by the security applet. 

22. (Original) The computer readable storage media of Claim 21 the login data forms a 
basis for a key used to encrypt the string. 

23. (Currently amended) The computer readable storage media of Claim 21 wherein the 
security applet is a locally executed Java applet to perform decryption of the string subsequently 
sent using a key word from the login data. 

24. (Currently Amended) The computer readable storage media of Claim 21 which 
when executed cause a digital processing system to perform a method further comprising: 

comparing the login data to a valid login data to identify if the user is valid; and 
denying access if the user node is not valid. 

25. (Canceled) 

26. (Canceled) 

27. (Canceled) 
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28. (Canceled) 



29. (Canceled) 



30. (Canceled) 
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In regard to Claim 1, as amended this claim teaches concatenating data from a plurality 
of fields into a string, encrypting the string, serving to a user node the webpage and a form 
corresponding to the webpage that includes each blank field in the plurality of fields and the 
encrypted string, and enabling local decryption of at least the encrypted string. 

Additionally, although Bowman discloses concatenating data arranged in field value 
pairs to form a string that is remotely encrypted, the cited reference fails to teach or suggest 
enabling local decryption of the string at a user node. Also, Bowman fails to teach serving a web 
page and a corresponding form that includes each blank field in the plurality of fields and the 
encrypted string. (Col. 3, lines 64-66; Col. 4, lines 39-40; and Col. 5, lines 9-13). Therefore, for at 
least these reasons, amended Claim 1 is allowable over the Bovraian reference. Furthermore, 
amended Claim 16 is substantially similar to amended Claim 1 in some ways, albeit different in 
other ways. Therefore, amended Claim 16 is also allowable for at least the same reasons as 
amended Claim 1. 

Also, since Claims 2-3, 5-7, and 9 depend from amended independent Claim 1, and 
Claims 17-18, 20-22, and 24 depend from amended independent Claim 16, these dependent claims 
are at least allowable for the same reasons as the respective independent claims upon which they 
depend. Moreover, since Claims 25, 26,27, 29, and 30 are cancelled, their rejection is now moot. 

In regard to amended Claim 10, the claimed invention teaches accepting a frame having a 
resident security applet, receiving a subframe including a form with a plurality of blank fields and 
an encrypted string, locally decrypting the encrypted string with the security applet, and distributing 
a plurality of portions of the decrypted string to the plurality of blank fields in the form. 

In contrast, Bovraian appears to disclose receiving a form including an encrypted string 
and a plurality of blank fields, for which a user can set values of selectable options, (Col. 5, lines 
51-51). However, the cited reference does not appear to teach or suggest locally decrypting the 
encrypted string. Rather, the CGI scripts are remotely executed to perform decryption on the 
encrypted strings for further processing. Further, Bovraian's processing can entail initiating an SSL 
connection to the users web browser (Col. 8, lines 50-51). Accordingly, amended Claim 10 is not 
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anticipated or made obvious by Bowman, and this amended claim is now in condition for 
allowance. 

Additionally, since Claims 11-15 depend from amended independent Claim 10, these 
dependent claims are at least allowable for the same reasons as the respective independent claims 
upon which they depend. 

Claim Rejections - 35 U.S.C. § 103(a) 

The Office Action has rejected dependent Claims 4, 8, 19, 23, and 28 under 35 U.S.C. 
§ 103(a) as being unpatentable over Bowman. However, since Claims 4, 8, 19, 23 depend from 
amended independent claims that are now allowable, these dependent claims are at least allowable 
for the same reasons. Also, since Claim 28 is cancelled, this rejection is now moot. 
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CONCLUSION 



By the foregoing explanations, Applicants believe that this response has addressed fully 
all of the concerns expressed in the Non-Final Office Action, and believes that it has placed each of 
the pending claims in condition for immediate allowance. Should any further aspects of the 
application remain unresolved, the Examiner is invited to telephone Applicants' attorney at the 
- number listed below. ^ 



Dated: January 27, 2006 ResrfdctfiUlv submitted, 

Jop^w, Branch 

/Registration No.: 41,633 
DARBY & DARBY P.O. 
P.O. Box 5257 

New York, New York 10150-5257 
(206) 262-8900 
(212) 527-7701 (Fax) 
Attorneys/Agents For Applicant 
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